RE: cannot read PEM key file - no start line

2014-09-13 Thread Dave Thompson
From: owner-openssl-us...@openssl.org On Behalf Of Dave Thompson Sent: Friday, September 12, 2014 04:31 *If* you are now using a legacy-format encrypted private-key (and your original error message suggested you might need some form of private key, which does necessarily mean

Avoiding a read that wants writeability (and vice versa) ...

2014-09-13 Thread John Lane Schultz
In my full-duplex, non-blocking application, I’d like to avoid renegotiation because my application doesn’t need it and the complexity it seems to add. I was wondering, if neither side ever explicitly causes renegotiation to occur (e.g. - SSL_renegotiate), is it still possible with existing

Trouble getting a prompt after I installed Open SSL

2014-09-13 Thread John Augustus
Hello, I need some assistance on getting openssl to work on my DELL laptop. It seems when I install it, I see it on my workstation, but I cannot see to get a prompt. Can you write some steps for me to follow? Thanks, John Augustus, GISF Information Security Analyst - GeC Infosec IA w.

openssl sess_id failed

2014-09-13 Thread yu.wang
Dear Sir, 我应用的openssl版本为：openssl1.0.1i，平台为rtems操作系统，我在使用 openssl 给 http 网络通信过程中会出现如下错误： error:140B512D:SSL routines:ssl_get_new_session:ssl session id callback failed 我不知道这是什么原因造成的，但是我同样的采用04年的openssl0.9.7d完全 可以运行过去，没有错误。 期待您的解答！ Thanks ！ Best Regards, yu.wang

SSL v3.0 is not set as default protocol upon disabling v2.

2014-09-13 Thread abhijit pai
Hello All, I am using openSSL in my custom HTTP client. Here I use SSLv23_client_method() and disable SSLv2 using SSL_CTX_set_options(ctx, SSL_OP_ALL| SSL_OP_NO_SSLv2) I would expect the handshake method sent out to the server be SSL v3.0 but to my surprise it is TLS 1.0, which for some reasons

OpenSSL FIPS Object Module 2.0.8 now available - Dual EC DRBG removed (again)

2014-09-13 Thread Steve Marquess
It only took nine months, but we finally have a revision of the OpenSSL FIPS Object Module v2.0 (validation certificate #1747) that supports all formally tested platforms and omits Dual EC DRBG entirely. The earlier revision 2.0.6 also removed Dual EC DRBG, but was superseded only three days

RE: cannot read PEM key file - no start line

2014-09-13 Thread Liz Fall
Hi Victor, I did specify the client key file to NULL. Then, I authenticated the client with a user id and password. That worked. Why would the file not have a client private key? Thanks for your help. Liz -Original Message- From: owner-openssl-us...@openssl.org

Re: cannot read PEM key file - no start line

2014-09-13 Thread Viktor Dukhovni
On Sat, Sep 13, 2014 at 06:46:01PM -0700, Liz Fall wrote: I did specify the client key file to NULL. Then, I authenticated the client with a user id and password. That worked. Good. I think it is best to stop there for now. Why would the file not have a client private key? [ No such

RE: cannot read PEM key file - no start line

2014-09-13 Thread Liz Fall
Thank you, Viktor. Do you have a good recommendation? Thanks, Liz -Original Message- From: owner-openssl-us...@openssl.org [mailto:owner-openssl-us...@openssl.org] On Behalf Of Viktor Dukhovni Sent: Saturday, September 13, 2014 9:21 PM To: openssl-users@openssl.org Subject: Re: cannot

Re: cannot read PEM key file - no start line

2014-09-13 Thread Viktor Dukhovni
On Sat, Sep 13, 2014 at 09:32:59PM -0700, Liz Fall wrote: Thank you, Viktor. Do you have a good recommendation? Sorry, have not read any myself. Got there over a couple of decades via a different path, but I am under the impression that at least one decent book on the subject is available.